It attempted to perform Unvalidated Redirects and Forwards attacks on the Apache server.

This IP belongs to IBM.

It attempted to use the VOIP server as a relay for calls to premium-rate numbers.

The IP was involved in a FTP Anonymity attack, exploiting anonymous FTP access to upload or download files without detection.

It attempted to use the FTP server to distribute SQL injection tools.

A series of active scareware campaigns was traced back to this IP address.

It attempted to delete directories on the FTP server.

The IP was involved in a FTP Anonymity attack, exploiting anonymous FTP access to upload or download files without detection.

The IP has been implicated in multiple cases of URL manipulation attempts.

This IP belongs to General Electric.

Participated in a botnet attack to overwhelm our server’s resources.

It attempted to use the Postfix server to relay emails with misleading headers to other servers.

It attempted to send emails from the Mail server that violate the server's email content policy.

This IP belongs to General Dynamics.

GET /manager/html: Signals an attempt to access the Tomcat Application Manager.

It attempted to use the VOIP server as a relay for calls to premium-rate numbers.

The IP under scrutiny has been associated with multiple modem hijackers.

Spike in 401 (unauthorized) or 403 (forbidden) HTTP response codes.

The IP attempted to launch Ciphertext attacks, trying to decrypt SSH-encrypted communication.

It attempted to send emails from the Postfix server to email addresses that have previously marked emails from the server as spam.

This IP has been identified as running a botnet targeting our server systems with ransomware.

HTTP Fingerprinting: Sequential requests that aim to identify server software types and version numbers.

It attempted to perform SQL injection attacks through the Apache server.

This IP belongs to Ford Motor.

The IP address has been associated with unwanted browser toolbar installations.